Use username and password from environment variables if present.

Otherwise, use those from the yml file. This allows overriding with real govdelivery credentials without the risk of committing them.

Update README to explain the env vars used.